Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.mft
File: ygHfSTk2pi4uyamAWo-ja4M1vVA.mft (raw, json)
Hash identifier: g6j0OkFOiZEdfGVGkIMOYQWqBuFlETfJwAv3uaQzsQI=
Subject key identifier: C7:A2:59:46:5E:A9:85:43:46:06:83:97:FF:33:42:63:80:4A:A8:41
Authority key identifier: CA:01:DF:49:39:36:A6:2E:2E:C9:A9:80:5A:8F:A3:6B:83:35:BD:50
Certificate issuer: /CN=ca01df493936a62e2ec9a9805a8fa36b8335bd50
Certificate serial: 0194BCE09BD67B3509AF25920A1FC2CBDF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygHfSTk2pi4uyamAWo-ja4M1vVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.mft
Manifest number: 05B8
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: VJejrkbQcGz8ZtoJmN8x1bw4bkc.roa (hash: fTHkpU+4ZrTAo/sH1aFITBDz8Ocuvc9wBymMbgUJLms=)
2: ygHfSTk2pi4uyamAWo-ja4M1vVA.crl (hash: mz5tqgLvS87Y1KLl1rdzw/UAwjjS6HmcPYVPiQmD5F8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:d6:7b:35:09:af:25:92:0a:1f:c2:cb:df:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca01df493936a62e2ec9a9805a8fa36b8335bd50
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=c7a259465ea9854346068397ff334263804aa841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:98:63:eb:bf:9f:9b:3c:88:10:a1:21:89:
c0:c0:c2:d9:28:88:32:a7:ea:4c:ee:f9:fb:6e:78:
ba:b8:f8:5a:2c:04:c2:05:0c:c8:67:e1:97:96:f0:
ef:4d:77:f5:42:d3:dc:ee:08:73:c4:78:27:61:a0:
41:57:a0:15:90:a3:3a:70:9b:2c:5e:67:dc:78:8b:
ae:95:11:91:40:7c:84:6b:ea:33:d4:df:72:ca:77:
dc:29:47:30:42:ab:1f:63:b3:b4:42:ad:bd:68:b9:
e0:f8:61:00:4a:cd:8a:47:38:94:d8:d1:69:06:58:
40:b8:f1:14:83:5a:e5:d5:7e:35:03:64:21:91:07:
3b:af:4a:2b:1d:fb:28:1d:cb:f5:9a:b1:c1:01:1b:
02:cd:2d:d8:57:42:e4:05:bc:53:d0:6e:77:57:a0:
ca:47:89:8a:84:21:fb:40:8f:00:0a:83:59:f3:55:
fe:00:1a:20:b5:86:83:47:7a:c4:e0:53:9f:5c:25:
29:58:21:e6:3e:ef:0c:11:a8:52:93:b2:c3:d6:de:
cb:0e:31:31:26:01:82:75:2f:0b:10:c7:1f:ff:d0:
26:ff:12:ed:e6:a7:3a:90:dc:da:8e:30:d5:f3:92:
15:36:06:45:af:a7:ce:89:64:85:64:8b:08:80:7b:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A2:59:46:5E:A9:85:43:46:06:83:97:FF:33:42:63:80:4A:A8:41
X509v3 Authority Key Identifier:
keyid:CA:01:DF:49:39:36:A6:2E:2E:C9:A9:80:5A:8F:A3:6B:83:35:BD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygHfSTk2pi4uyamAWo-ja4M1vVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/649e81-cca2-404c-98a5-962758a3d5ea/1/ygHfSTk2pi4uyamAWo-ja4M1vVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a3:3f:91:c4:51:88:35:06:d1:81:01:1d:45:3c:76:4b:e7:
ff:ba:eb:ed:0b:1e:30:62:13:a1:64:5f:50:27:6f:b7:69:c3:
48:bf:a9:09:87:b7:8a:2a:06:ed:5a:b7:0d:52:a4:74:ed:a4:
e9:10:df:27:79:97:ca:95:3a:dd:85:6f:79:f3:cf:3d:ba:b6:
ea:42:8f:82:0a:32:4e:a9:87:c5:3d:29:2f:b3:13:98:90:a4:
10:71:5a:95:c0:d4:19:cd:8e:38:95:c3:f7:a0:36:bd:6d:49:
07:91:9f:64:da:8b:e3:9d:88:56:cb:5b:fc:5e:0d:7a:ae:09:
36:75:ec:6f:22:ac:b3:ee:5f:9c:f2:fc:bd:16:7c:a0:df:6a:
41:20:85:4c:4b:8a:ab:c5:9b:2e:fa:c4:20:a3:a6:9f:32:42:
ce:4b:86:a7:5d:98:a8:d5:15:a7:48:53:00:60:9e:b1:90:26:
57:b1:43:04:2e:df:0f:d0:bf:96:e8:cc:68:c8:cf:7a:b4:1a:
8a:4a:f9:ce:40:db:c0:29:77:75:0c:53:ef:c8:a5:e0:16:1c:
57:07:f6:16:e4:d7:4a:57:54:bb:4d:11:2b:58:6b:35:3d:34:
85:a3:d4:c9:c4:03:22:4f:fd:31:3e:43:ba:23:f2:ce:82:56:
28:ce:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:12:57 2025 by rpki-client